about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2020-02-14 r/550 refactor(ops/nixos/camden): Merge ACME certificate blocksVincent Ambo1-11/+7
2020-02-14 r/549 feat(camden): Move to actual tazj.in hostnamesVincent Ambo1-4/+15
2020-02-12 r/548 feat(ops/nixos/nugget): Add camden to /etc/hostsVincent Ambo1-0/+7
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN.
2020-02-12 r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camdenVincent Ambo1-0/+21
2020-02-12 r/546 feat(ops/nixos/camden): Move ACME configuration out of nginxVincent Ambo1-4/+13
This makes it possible to re-use the same provisioning mechanism for multiple related domains.
2020-02-12 r/545 feat(ops/nixos/camden): Set up cgit serviceVincent Ambo1-5/+27
Adds a user & group which are configured to own the local depot copy, and a cgit service to serve it. The depot checkout was configured as: mkdir -p /var/git && chown git: /var/git # now, as the git user, in /var/git git clone --bare ... depot chmod -R g+rw /var/git chmod g+s (find /var/git -type d) git init --bare --shared=all depot My personal user is a member of the git group, which means that after the above configuration I can push to the bare repo as my user and things work. Also, crucially, the `post-update` hook must be enabled as cgit uses the dumb HTTP transport.
2020-02-12 r/544 refactor(web/cgit-taz): Serve depot from disk location on camdenVincent Ambo1-4/+3
2020-02-11 r/543 fix(nix/tailscale): Fix incorrect Tailscale ACL config typeVincent Ambo2-11/+24
2020-02-11 r/542 feat(ops/nixos/camden): Serve /blobs/ from /var/www/blobsVincent Ambo1-1/+5
This directory is writeable by me and is intended to make it easy to serve random blobs.
2020-02-11 r/541 feat(ops/nixos/camden): Enable haveged entropy "generator"Vincent Ambo1-3/+4
2020-02-11 r/540 feat(ops/nixos/nugget): Set up nginx serving homepage & blogVincent Ambo1-0/+53
This nginx does not currently log access correctly because for some impenetrable reason (as is tradition), neither /dev/stdout nor /dev/fd/1 exist for nginx at runtime. This is probably systemd's doing, but I'll debug it later.
2020-02-11 r/539 refactor(web): Let //web/ derivations build static pages onlyVincent Ambo3-93/+14
Removes nginx configuration built by the web targets (with the exception of the includable block used to set up redirects for old blog URLs).
2020-02-11 r/538 fix(ops/nixos/camden): Use package set from depot pinVincent Ambo1-2/+9
2020-02-11 r/537 feat(nix/tailscale): Add function for generating tailscale ACLsVincent Ambo2-1/+27
... and use it on Camden!
2020-02-11 r/536 feat(ops/nixos/camden): Join camden.tazj.in into Tailscale meshVincent Ambo1-3/+21
2020-02-11 r/535 fix(ops/nixos): Add camden to rebuilder scriptVincent Ambo1-0/+4
This should probably be templated instead.
2020-02-11 r/534 feat(ops/nixos): Add initial configuration for host camdenVincent Ambo3-7/+96
2020-02-11 r/533 feat(ops/nixos/nugget): Enable tailscale-relayVincent Ambo1-0/+12
2020-02-11 r/532 feat(ops/nixos): Add NixOS module for running tailscaleVincent Ambo2-0/+78
This uses the "legacy" tailscale Linux client, but built from source as per the previous commits.
2020-02-11 r/531 fix(third_party/tailscale): Add patch to make taillogin workVincent Ambo2-0/+30
2020-02-11 r/530 chore(ops/nixos/nugget): Install tailscale on nuggetVincent Ambo1-0/+1
2020-02-11 r/529 fix(third_party/tailscale): Add default relaynode acl.json to outputVincent Ambo1-1/+6
2020-02-10 r/528 fix(third_party/tailscale): Build all sub-packagesVincent Ambo1-0/+2
At the moment it seems like all of them are still required - things are in flux!
2020-02-10 r/527 feat(third_party): Add package for tailscaleVincent Ambo2-0/+33
Adds a package for the now-opensourced tailscale client tailscale client.
2020-02-10 r/526 docs(web/blog): Add some TODO entries for the draftVincent Ambo1-1/+17
2020-02-10 r/525 docs(web/blog): Rewrite some style issues in the Emacs postVincent Ambo1-35/+35
2020-02-10 r/524 feat(web/blog): Add draft blog post on EmacsVincent Ambo2-0/+223
This post is a draft, i.e. not linked from the index. It's not a secret, but if you do find it through this commit before its publication please don't share it too widely yet.
2020-02-10 r/523 style(web/homepage): Highlight <kbd> elements like buttonsVincent Ambo1-0/+14
2020-02-10 r/522 fix(web/homepage): Make .uncoloured-link work againVincent Ambo1-0/+4
2020-02-09 r/521 feat(web/blog): Add support for draft & unlisted postsVincent Ambo2-8/+39
Posts with either `draft = true;` or `listed = false;` will no longer be included in index generation and will have a warning callout inserted at the top of the page urging people not to share the links to them.
2020-02-09 r/520 style(web/blog): Minor formatting fixes in Watchguard postVincent Ambo1-4/+4
2020-02-09 r/519 style(web/homepage): Overflow long code lines into scroll barsVincent Ambo1-3/+2
2020-02-09 r/518 chore(web/blog): Move Watchguard images into static assetsVincent Ambo7-7/+7
Rather than sending user data to imgur ... lets get rid of all the external stuff!
2020-02-09 r/517 chore(web/blog): Remove duplicate CSS fileVincent Ambo1-35/+0
2020-02-09 r/516 chore(web/homepage): Configure caching for fonts & imagesVincent Ambo1-0/+4
2020-02-09 r/515 style(web/homepage): Unify page max-width at 800pxVincent Ambo1-2/+1
2020-02-09 r/514 fix(third_party/cgit): Make vpath & repo available for about cmdVincent Ambo1-1/+1
This change makes cgit pass the current repo and vpath inside of the repo on to the about cmd, which makes it possible for it to correctly render `tree`, `log` and other links to the same vpath.
2020-02-09 r/513 style(web/homepage): Use somewhat livelier coloursVincent Ambo2-9/+8
The previous ones looked kind of dull. These are from my gruber-darker rainbow-delimiters theme.
2020-02-09 r/512 feat(web/homepage): Add styling for Cheddar calloutsVincent Ambo2-2/+27
2020-02-09 r/511 Merge branch 'feat/cheddar-extensions'Vincent Ambo2-36/+120
2020-02-09 r/510 docs(web/blog): Update best-tools post with new phoneVincent Ambo1-5/+13
2020-02-09 r/509 feat(web/homepage): Add an entry for the Principia DiscordiaVincent Ambo1-0/+10
2020-02-09 r/508 chore(ops/infra/k8s): Bump website replicas to 3Vincent Ambo1-1/+1
There are typically 3 machines in the cluster, might as well have 3 website instances!
2020-02-09 r/507 style(web/homepage): Wrap links around the entire entryVincent Ambo3-17/+18
This makes it much easier to click on them. Required some style reshuffling to satisfy CSS.
2020-02-09 r/506 fix(ops/infra/k8s): Send www.* to nginx for redirectionsVincent Ambo1-1/+9
2020-02-09 r/505 fix(web/homepage): Fix redirect setupVincent Ambo1-1/+8
- all www.* traffic -> non-www - redirect old blog entries without including the port
2020-02-09 r/504 fix(ci-builds): Remove tools.blog_cliVincent Ambo1-1/+0
2020-02-09 r/503 feat(ops/infra/k8s): Add website deployment configurationVincent Ambo1-0/+37
2020-02-09 r/502 docs: Update README with new website setupVincent Ambo2-2/+3
2020-02-09 r/501 chore(tools): Remove //tools/blog_cliVincent Ambo5-263/+0
No longer needed with the deprecation of tazblog.